☁️ Nextcloud server, a safe home for all your data
Find a file
Lukas Reschke 1c75b73239 Verify authentication before initializing apps and routing
The current behaviour of the authenticion logic in base.php prevents REST APIs in ownCloud applications to work.

Because `!self::$CLI` is usually always a true statement the previously above block was entered which returned, thus the authentication logic for this part does not trigger in.

This can be reproduced by installing apps such as the News app and issuing the following command:

`curl -u admin:admin http://localhost/index.php/apps/news/api/v1-2/feeds`

The following parts needs to get throughly tested:

- [ ] OCS
- [ ] remote.php's DAV features
- [ ] Regular login features

This bug affects master and stable7. I'd propose that we merge this for 8.0 since this has the potential to break every component that relies on Basic Auth features. A backport would also be very nice.

Remark to myself: We really need to move out the authentication code for 8.1 out of base.php - I already have a local branch that does that somewhere which I will get in shape for 8.1... - This untested code is a night-mare.

Fixes itself.
2015-01-09 21:07:29 +01:00
.idea
3rdparty@3c5c49860e update dbal to 2.5.0 2014-12-30 16:47:30 +01:00
apps Merge pull request #13204 from owncloud/enc_fix_key_lost 2015-01-09 18:40:51 +01:00
build
config Merge pull request #12984 from owncloud/ldap-user-cleanup-master 2015-01-09 10:47:02 +01:00
core Merge pull request #13195 from owncloud/resharepermfix 2015-01-09 18:05:05 +01:00
l10n
lib Verify authentication before initializing apps and routing 2015-01-09 21:07:29 +01:00
ocs
search use cancelable timeout, on scroll only fetch next page if last query had any results 2015-01-06 15:18:41 +01:00
settings Fix js error in personal settings if there is no password field 2015-01-09 15:38:39 +01:00
tests Merge pull request #13208 from owncloud/hhvm-streamwrapper-exception 2015-01-09 18:02:28 +01:00
themes
.bowerrc
.gitignore Add provisioning_api app 2014-12-24 22:15:20 +01:00
.gitmodules
.htaccess Add version to .htaccess 2015-01-08 12:49:02 +01:00
.jshintrc
.scrutinizer.yml bower jquery-ui - exported changes to a separate css file 2014-12-13 09:47:34 +01:00
.user.ini
AUTHORS
autotest-external.sh Setup a docker container that holds a webdav instance to test files_external 2014-12-17 21:50:35 +01:00
autotest-hhvm.sh Adding autotest-hhvm.sh 2014-12-18 10:21:15 +01:00
autotest-js.sh
autotest.cmd
autotest.sh
bower.json bump jquery.strengthify to 0.4.1 2015-01-06 13:48:58 +01:00
buildjsdocs.sh
console.php
CONTRIBUTING.md
COPYING-AGPL
COPYING-README
cron.php
db_structure.xml
index.html
index.php
indie.json
issue_template.md Also add secret 2014-12-19 10:57:46 +01:00
occ
public.php
README.md Add some fancy translation chart 2014-12-16 19:55:42 +01:00
remote.php
robots.txt
status.php
version.php 8.0 alpha 1 2015-01-01 23:07:16 +01:00

ownCloud

ownCloud gives you freedom and control over your own data. A personal cloud which runs on your own server.

Build Status on Jenkins CI

Git master: Build Status

Quality:

  • Scrutinizer: Scrutinizer Quality Score
  • CodeClimate: Code Climate

Installation instructions

http://doc.owncloud.org/server/7.0/developer_manual/app/index.html

Contribution Guidelines

http://owncloud.org/contribute/

Get in touch

Important notice on translations

Please submit translations via Transifex: https://www.transifex.com/projects/p/owncloud/

Transifex

For more detailed information about translations: http://doc.owncloud.org/server/7.0/developer_manual/core/translation.html